  weslambertandGitHub
|
d4bffba736
|
Merge pull request #11153 from Security-Onion-Solutions/fix/elastic_fleet_integrations
Add more Elastic Fleet integrations
|
2023-08-23 16:22:14 -04:00 |
|
|
Wes
|
d2d0d53eef
|
Change order
|
2023-08-23 20:20:44 +00:00 |
|
|
Wes
|
31a49268cb
|
Add o365 and okta
|
2023-08-23 20:20:06 +00:00 |
|
|
Wes
|
2f51349ff8
|
Add SOC configuration
|
2023-08-23 20:07:42 +00:00 |
|
|
Wes
|
3f2793088a
|
Add templates
|
2023-08-23 19:02:50 +00:00 |
|
|
Wes
|
0f24c8e8bb
|
Add packages
|
2023-08-23 19:02:32 +00:00 |
|
|
weslambertandGitHub
|
4a582804b0
|
Merge pull request #11139 from Security-Onion-Solutions/fix/soc_event_fields
Update SOC event fields
|
2023-08-22 10:46:38 -04:00 |
|
|
weslambertandGitHub
|
563a495725
|
Add Playbook
|
2023-08-21 11:24:07 -04:00 |
|
|
weslambertandGitHub
|
9e18fe64cf
|
Remove OSSEC configuration
|
2023-08-21 11:20:47 -04:00 |
|
|
weslambertandGitHub
|
708a681ed9
|
Merge pull request #11123 from Security-Onion-Solutions/fix/elastic_fleet_zeek_console
Exclude console log
|
2023-08-21 10:31:32 -04:00 |
|
|
weslambertandGitHub
|
fa31bd4bf7
|
Exclude console log
|
2023-08-21 09:20:49 -04:00 |
|
|
weslambertandGitHub
|
488c4d5000
|
Merge pull request #11079 from Security-Onion-Solutions/fix/import_evtx_pcap
Assign pipeline to import
|
2023-08-17 12:29:01 -04:00 |
|
|
Wes
|
7971d9749a
|
Assign pipeline to import
|
2023-08-17 14:08:48 +00:00 |
|
|
weslambertandGitHub
|
5ebe33d45f
|
Merge pull request #11068 from Security-Onion-Solutions/fix/elastic_fleet_package_force_2
Fix so-elastic-fleet-package-load
|
2023-08-17 08:20:24 -04:00 |
|
|
weslambertandGitHub
|
4887eb4957
|
Update so-elastic-fleet-package-load
|
2023-08-16 22:31:14 -04:00 |
|
|
weslambertandGitHub
|
0620919241
|
Merge pull request #11064 from Security-Onion-Solutions/fix/elasticfleet_package_force
Force package installation
|
2023-08-16 16:37:39 -04:00 |
|
|
Wes
|
e84d624d23
|
Force package installation
|
2023-08-16 20:10:20 +00:00 |
|
|
weslambertandGitHub
|
abf74e0ae4
|
Merge pull request #10940 from Security-Onion-Solutions/foxtrot
Add time shift for so-import-evtx
|
2023-08-03 16:56:40 -04:00 |
|
|
weslambertandGitHub
|
ca6276b922
|
Update VERSION
|
2023-08-03 15:58:33 -04:00 |
|
|
weslambertandGitHub
|
3e4136e641
|
Update help text
|
2023-08-03 15:56:05 -04:00 |
|
|
weslambertandGitHub
|
cf2233bbb6
|
Add help information for time shift
|
2023-08-03 08:54:54 -04:00 |
|
|
weslambertandGitHub
|
3847863b3d
|
Add time shift
|
2023-08-03 08:51:23 -04:00 |
|
|
weslambertandGitHub
|
3368789b43
|
Update VERSION
|
2023-08-03 08:49:45 -04:00 |
|
|
weslambertandGitHub
|
72e1cbbfb6
|
Merge pull request #10920 from Security-Onion-Solutions/fix/pfsense
Pfsense fix
|
2023-08-02 13:27:33 -04:00 |
|
|
weslambertandGitHub
|
f102351052
|
Add event
|
2023-08-02 13:25:44 -04:00 |
|
|
weslambertandGitHub
|
ac28f90af3
|
Remove override
|
2023-08-02 13:15:11 -04:00 |
|
|
weslambertandGitHub
|
25b11c35fb
|
Merge pull request #10915 from Security-Onion-Solutions/fix/ea_elastic_defend
Set version for Elastic Defend and enable updates
|
2023-08-02 10:32:30 -04:00 |
|
|
weslambertandGitHub
|
ef0301d364
|
Merge pull request #10914 from Security-Onion-Solutions/feature/package_list
Add package list
|
2023-08-02 10:03:38 -04:00 |
|
|
Wes
|
e694019027
|
Add package list
|
2023-08-02 13:50:14 +00:00 |
|
|
weslambertandGitHub
|
22ebb2faf6
|
Merge pull request #10907 from Security-Onion-Solutions/fix/ea_container_logs
EA Container Logs
|
2023-08-02 09:26:53 -04:00 |
|
|
Wes
|
0d5ed2e835
|
Set version for Elastic Defend and enable updates
|
2023-08-02 13:21:03 +00:00 |
|
|
Wes
|
0e047cffad
|
Add to logrotate
|
2023-08-01 20:14:53 +00:00 |
|
|
Wes
|
44b086a028
|
Change path
|
2023-08-01 20:13:50 +00:00 |
|
|
Wes
|
4e2eb86b36
|
Move LOGS_PATH to environment vars
|
2023-08-01 20:11:51 +00:00 |
|
|
weslambertandGitHub
|
1cbf60825d
|
Add log dir
|
2023-08-01 14:40:52 -04:00 |
|
|
weslambertandGitHub
|
2d13bf1a61
|
Present logs to the host
|
2023-08-01 14:40:12 -04:00 |
|
|
weslambertandGitHub
|
e7bef745eb
|
Merge pull request #10904 from Security-Onion-Solutions/fix/syslog
Move syslog to the INPUT chain where needed
|
2023-08-01 12:14:48 -04:00 |
|
|
weslambertandGitHub
|
4adaddf13f
|
Move syslog to the INPUT chain where needed
|
2023-08-01 10:14:59 -04:00 |
|
|
weslambertandGitHub
|
ba3660d0da
|
Merge pull request #10894 from Security-Onion-Solutions/fix/soc_auth
SOC Auth msg fix
|
2023-08-01 08:35:41 -04:00 |
|
|
weslambertandGitHub
|
83265d9d6c
|
Merge pull request #10893 from Security-Onion-Solutions/foxtrot
Elastic 8.2.2
|
2023-08-01 08:20:07 -04:00 |
|
|
weslambertandGitHub
|
527a6ba454
|
Use asterisk when searching 'msg' since it is now a keyword
|
2023-07-31 23:52:38 -04:00 |
|
|
weslambertandGitHub
|
f84b0a3219
|
Update VERSION
|
2023-07-31 23:16:46 -04:00 |
|
|
weslambertandGitHub
|
ae6997a6b7
|
Merge pull request #10892 from Security-Onion-Solutions/feature/elastic_8.8.2
Elastic 8.8.2
|
2023-07-31 22:24:21 -04:00 |
|
|
weslambertandGitHub
|
9d59e4250f
|
Update VERSION
|
2023-07-31 22:23:54 -04:00 |
|
|
Wes
|
48d9c14563
|
Enable log package by default
|
2023-08-01 02:20:43 +00:00 |
|
|
Wes
|
29b64eadd4
|
Change log.log to log.logs
|
2023-08-01 02:20:22 +00:00 |
|
|
weslambertandGitHub
|
5dd5f9fc1c
|
Elastic 8.8.2
|
2023-07-31 22:18:43 -04:00 |
|
|
weslambertandGitHub
|
44c926ba8d
|
Elastic 8.8.2
|
2023-07-31 22:18:07 -04:00 |
|
|
weslambertandGitHub
|
6a55a8e5c0
|
Elastic 8.2.2
|
2023-07-31 22:17:22 -04:00 |
|
|
Wes
|
5553be02ac
|
Change how tags are added
|
2023-07-24 21:31:28 +00:00 |
|
|
Wes
|
4efc951eaf
|
Add tags
|
2023-07-24 20:57:39 +00:00 |
|
|
Wes
|
d84dbf9535
|
Add fleet
|
2023-07-24 18:53:52 +00:00 |
|
|
Wes
|
de7b7ff989
|
Add endpoint
|
2023-07-24 18:35:02 +00:00 |
|
|
weslambertandGitHub
|
be254b15f2
|
Merge pull request #10804 from Security-Onion-Solutions/fix/fleet_logging
Fleet logging
|
2023-07-20 15:51:56 -04:00 |
|
|
weslambertandGitHub
|
83e1e3efdc
|
Merge pull request #10788 from Security-Onion-Solutions/fix/elastic_mappings
Fix user name mapping and remove security subfield
|
2023-07-20 15:51:42 -04:00 |
|
|
Wes
|
d07c46f27e
|
Change playbook and sysmon
|
2023-07-20 16:08:50 +00:00 |
|
|
Wes
|
c68cd6cf33
|
Fix typo
|
2023-07-20 14:39:35 +00:00 |
|
|
Wes
|
4b7e7978ef
|
Add final pipeline
|
2023-07-19 19:56:54 +00:00 |
|
|
Wes
|
0b19179630
|
Add logrotate
|
2023-07-19 15:17:42 +00:00 |
|
|
Wes
|
30a14f8aaf
|
Add logging
|
2023-07-19 15:00:20 +00:00 |
|
|
Wes
|
877fc36013
|
Add log dir
|
2023-07-19 14:57:24 +00:00 |
|
|
Wes
|
b738325880
|
Remove keyword
|
2023-07-19 13:55:12 +00:00 |
|
|
Wes
|
1848a835f5
|
Remove keyword
|
2023-07-19 13:52:15 +00:00 |
|
|
weslambertandGitHub
|
17fcf12608
|
Merge pull request #10791 from Security-Onion-Solutions/fix/elastic_clear
Set delete for interactive
|
2023-07-19 08:27:00 -04:00 |
|
|
Wes
|
6a8737e9a2
|
Set delete for interactive
|
2023-07-19 12:21:47 +00:00 |
|
|
weslambertandGitHub
|
41ebb403ca
|
Merge pull request #10787 from Security-Onion-Solutions/fix/elastic_clear
Use new agent scripts for Elastic clear command
|
2023-07-18 16:15:27 -04:00 |
|
|
Wes
|
a59eda319e
|
Remove security subfield
|
2023-07-18 19:00:50 +00:00 |
|
|
Wes
|
8a76975d8c
|
Use new agent scripts
|
2023-07-18 18:43:57 +00:00 |
|
|
Wes
|
1d3e39b6bd
|
Map user name to keyword and remove security subfield generation
|
2023-07-18 14:46:47 +00:00 |
|
|
weslambertandGitHub
|
6816d06710
|
Merge pull request #10766 from Security-Onion-Solutions/fix/elastic-agent-scripts
Add agent scripts
|
2023-07-17 10:46:54 -04:00 |
|
|
Wes
|
d19615f743
|
Fix typo
|
2023-07-17 14:42:27 +00:00 |
|
|
Wes
|
1a4515fc8a
|
Split restart into stop and start
|
2023-07-17 14:30:51 +00:00 |
|
|
Wes
|
31696803e1
|
Use correct name
|
2023-07-17 14:28:12 +00:00 |
|
|
Wes
|
e715dfa354
|
Remove sbin
|
2023-07-17 14:27:39 +00:00 |
|
|
Wes
|
c723a09107
|
Remove agent installer generation script
|
2023-07-14 21:45:25 +00:00 |
|
|
Wes
|
8cf3ceeb71
|
Update agent scripts
|
2023-07-14 21:43:03 +00:00 |
|
|
weslambertandGitHub
|
922a77ac55
|
Merge pull request #10762 from Security-Onion-Solutions/fix/integration_elasticsearch
Allow Elasticsearch integration policy
|
2023-07-13 14:42:23 -04:00 |
|
|
weslambertandGitHub
|
a62f96595c
|
Merge pull request #10763 from Security-Onion-Solutions/fix/strelka_pe
Strelka entropy and pe fixes
|
2023-07-13 14:42:12 -04:00 |
|
|
weslambertandGitHub
|
0c177ec923
|
Allow Elasticsearch integration policy
|
2023-07-13 10:46:59 -04:00 |
|
|
Wes
|
41f00c0aa1
|
Add agent scripts
|
2023-07-13 14:32:22 +00:00 |
|
|
Wes
|
e3249c8e4c
|
Wrap values in quotes for proper conversion
|
2023-07-13 14:18:57 +00:00 |
|
|
weslambertandGitHub
|
85bb5a327c
|
Fix long vs float for pe version
|
2023-07-13 09:38:09 -04:00 |
|
|
weslambertandGitHub
|
8acc37a7d1
|
Merge pull request #10749 from Security-Onion-Solutions/fix/yara_update
Fix syntax for conditional
|
2023-07-11 13:41:38 -04:00 |
|
|
weslambertandGitHub
|
5f1b467e64
|
Fix syntax for conditional
|
2023-07-11 13:37:50 -04:00 |
|
|
weslambertandGitHub
|
fe7fb7f54d
|
Merge pull request #10748 from Security-Onion-Solutions/fix/elasticsearch_strelka
Update logic for YARA matches
|
2023-07-11 13:02:24 -04:00 |
|
|
Wes
|
577bfac886
|
Update logic for YARA matches
|
2023-07-11 17:00:13 +00:00 |
|
|
weslambertandGitHub
|
7cdd1f89d7
|
Merge pull request #10736 from Security-Onion-Solutions/fix/strelka_path
Change path to old one
|
2023-07-11 09:13:36 -04:00 |
|
|
weslambertandGitHub
|
b7cab1d118
|
Change path to old one
|
2023-07-11 09:10:20 -04:00 |
|
|
weslambertandGitHub
|
f03a472ee5
|
Merge pull request #10731 from Security-Onion-Solutions/fix/kibana_file_search
Kibana dashboard changes
|
2023-07-11 08:50:03 -04:00 |
|
|
Wes
|
6b8893ded5
|
Update saved objects
|
2023-07-10 18:13:34 +00:00 |
|
|
Wes
|
6da96a733f
|
Use tags instead of dataset
|
2023-07-10 13:06:38 +00:00 |
|
|
weslambertandGitHub
|
8178338971
|
Merge pull request #10717 from Security-Onion-Solutions/fix/strelka_rules
Change path
|
2023-07-07 13:45:02 -04:00 |
|
|
weslambertandGitHub
|
79ed17b506
|
Change path
|
2023-07-07 13:31:43 -04:00 |
|
|
weslambertandGitHub
|
9f95306458
|
Merge pull request #10708 from Security-Onion-Solutions/fix/elasticsearch_templates_hn
Fix heavy node Elasticsearch template load
|
2023-07-07 09:52:54 -04:00 |
|
|
Wes
|
0b5ee49873
|
Fix inverted logic for component template
|
2023-07-06 20:46:35 +00:00 |
|
|
Wes
|
910125f13a
|
Restructure logic
|
2023-07-06 17:49:06 +00:00 |
|
|
Wes
|
d551faeb16
|
Heavy node template considerations
|
2023-07-06 17:19:28 +00:00 |
|
|
weslambertandGitHub
|
d31ea4097d
|
Merge pull request #10683 from Security-Onion-Solutions/fix/kibana_http_search
Kibana dashboard changes
|
2023-06-30 17:17:37 -04:00 |
|
|
Wes
|
c277b7acfa
|
Change Zeek file from evet dataset to tags
|
2023-06-30 20:24:10 +00:00 |
|
|
Wes
|
6bdccec6b1
|
Add asterisk back to Modbus search
|
2023-06-30 19:01:53 +00:00 |
|